Privacy.

coil is a software product for tattooers, published by COIL TATTOO, INC. and operated from the United States. References to “we” and “coil” mean COIL TATTOO, INC., operator of coil.tattoo and provider of the coil text-messaging program.

We do not share, sell, or provide your mobile phone number or messaging consent data to third parties or affiliates for marketing or promotional purposes.

When a client provides a phone number on a booking form, we collect the number, the consent record (what was agreed to and when), and the resulting message history. That data is used solely to send and receive the messages the client agreed to: booking confirmations, appointment reminders, aftercare instructions, and deposit links. Marketing texts send only after a separate, unchecked opt-in.

Message frequency varies. Message and data rates may apply. Reply STOP to opt out at any time or HELP for help (or email support@coil.tattoo). Messages are transmitted by Twilio, our messaging service provider, which processes numbers only to deliver messages on our behalf and never for its own marketing.

We collect the minimum we need to run your shop on coil:

• Account data: email address, display name, handle, IG handle if you connect Instagram, and any profile copy you save.
• Portfolio data: images you upload or that we pull from your linked Instagram, plus the styles and subjects an AI model reads off each photo. We use those for search and to suggest which artist fits a request; they are never shown as labels on your page.
• Instagram messages, only if you switch them on: with booking replies on, Instagram sends us new messages people send your professional account. An AI model (Anthropic's Claude) reads each one only to decide whether the person is asking to book work. If they are, we reply once from your account with a link to your booking page, and keep that conversation (message text, photos, the sender's username, name and profile picture, and times) so you can see what was answered and follow up. If they are not, we keep nothing about the message; we only store a one-way hash so we don't judge the same person twice. We never copy in the rest of your inbox. We never use message contents for advertising, never train AI models on them, and never share them with anyone else. Turning booking replies off stops delivery. Removing coil in your Instagram settings stops new messages. A data deletion request for coil sent through Instagram deletes all stored conversations and their attachments straight away. If the coil account is yours alone, it is closed too and deleted for good 30 days later; if you work in someone else's shop, everything coil got from your Instagram (your connection, synced posts and messages) is deleted straight away and the shop stays open.
• Inquiry data from your clients: name, contact info, body-location selection, references, the description of what they want. They give this directly when filling out your inquiry form.
• Google Calendar, only if you connect it: the list of your Google calendars, and the events on the ones you choose. See Google Calendar below.
• Consent forms and walk-in check-in: when your client signs a consent form, it holds their name, date of birth, home address, emergency contact if they give one, the design and where it goes, their medical answers, and, where you, your shop or your state ask for one, a photo of their ID, kept in private storage. A client who checks in with a shop's QR code can fill in those answers while they wait; they are kept with the check-in and copied into the form once an artist is picked. We keep none of them for anyone under 18.
• Payment metadata: Stripe handles all card data. We store Stripe customer / subscription / Connect account IDs, deposit amounts in cents, and timestamps. We never see card numbers.
• Logs and analytics: Sentry for errors, PostHog for product analytics, and Vercel Analytics for page-view counts. On coil's own site and the dashboard, PostHog records page views, clicks and web vitals. On artists' and shops' pages it records page views only, with no click capture and no recordings. On consent forms, check-in, tips, payments, healed photos, reviews and every other page reached by a private link, neither PostHog nor Vercel Analytics runs at all, and private links are blanked out of any address we do send. IP addresses, user-agents, and session timestamps are part of these. When you're signed in, PostHog links your activity to your email address, and Sentry gets a random user ID, never your name or email. On dashboard pages, Sentry records a short replay of the moments before an error, with all text and images hidden.
• Ad measurement (coil's own marketing pages only): the Meta Pixel runs on coil's own marketing and signup pages to measure whether our ads work. It never runs on artist sites, booking or inquiry forms, consent forms, or any page your clients use, and it doesn't load at all when your browser sends a Global Privacy Control signal or you've turned it off on Your privacy choices. If an artist fills out a form on coil's own marketing pages, the contact details they enter there may be matched to our ads as a SHA-256 hash (“advanced matching”). Mobile phone numbers and SMS consent data collected through the text-messaging program (booking forms and client messaging) are never used for advertising and are never shared, sold, or provided to Meta or any other third party or affiliate for marketing or promotional purposes.

• To run your account, your site, and the inquiry inbox.
• To send transactional email (magic links, receipts, aftercare reminders) and SMS (phone verification, aftercare).
• To run the AI features you use, only on your own data: reading styles off your photos, the Ask chat on your page (which tells your clients it's an AI assistant), healing photo checks, and suggesting which artist fits a shop's request.
• To send your clients the marketing emails you have switched on (next piece, anniversary, been-a-while, healed-photo credit, guest-spot news). Each one says why they got it, has a one-tap unsubscribe link and a postal address, and anyone who unsubscribes gets no more of them from you. Booking emails like reminders and aftercare still go.
• To detect abuse, fix bugs, and improve the product.
• We do not sell your data, your clients' data, or your portfolio. We don't train external AI on your work without your direct opt-in.
• We do not share, sell, or provide your mobile phone number or messaging consent data to third parties or affiliates for marketing or promotional purposes. Phone numbers and SMS opt-in records collected through booking forms are used only to send the messages described below and in our terms.

Each artist on coil can claim their own dedicated SMS number provisioned through Twilio. Clients text that number; coil's inbound webhook routes the message to the artist's thread in the dashboard.

Two consent categories. US TCPA rules distinguish between service SMS (appointment reminders, aftercare, deposit links, healed-photo reward, tip prompts, touch-up windows) and marketing SMS (next-piece nudges, flash drops, guest-spot announcements). Service SMS sends when a client provides their phone number for an appointment-related purpose. Marketing SMS only sends when the client has separately opted in via a dedicated checkbox on the inquiry form. Both categories respect STOP, UNSUBSCRIBE, QUIT, CANCEL, REVOKE, OPT-OUT, and free-form opt-out phrases per FCC rules effective April 11, 2025. Honor period: ten business days, usually within seconds. START resubscribes.

What the messaging program collects and how it's used. When a client provides a phone number on a booking form, we collect the number, the consent checkbox record (what was agreed to and when), and the resulting message history. That data is used solely to send and receive the messages the client agreed to: booking confirmations, appointment reminders, aftercare instructions, deposit links, and (only with the separate marketing opt-in) occasional marketing messages.

We do not share, sell, or provide your mobile phone number or messaging consent data to third parties or affiliates for marketing or promotional purposes. Messages are delivered through Twilio, our messaging service provider, which processes numbers only to transmit messages on our behalf and never for its own marketing.

Message frequency varies with your appointment activity. Message and data rates may apply. Every SMS coil sends carries the disclosure “Reply STOP to unsubscribe”; reply HELP for help or email support@coil.tattoo.

When a client texts your coil number with a photo and a message that looks like a healing question, coil's vision model (Anthropic Claude) reads the photo to classify it as healthy, watch, concern, or urgent. Healthy and watch verdicts get an automatic reply only if the artist has turned on “Answer healing photos for me”. The reply says it's automatic and that the artist will see the photo too. Concern and urgent verdicts get no automatic reply: they are flagged to the artist, with the photo attached, to answer themselves.

The client's photo and message are stored in your text conversation with that client so you have the history. The classification verdict is stored alongside. We do not share these photos with third parties beyond the AI provider that returns the verdict, and we do not use them to train any external model.

Coil never holds or routes client funds. Deposits, tips, and balances paid through Stripe Checkout flow direct to the artist's Stripe-Connect account. Coil is a flat-monthly subscription; we take no percentage of payment volume.

Artists may optionally enable a card-processing surcharge that adds a transparent line item to Stripe Checkout for the cardholder. Surcharging legality varies by state; the artist is responsible for compliance with their jurisdiction.

When a client signs a digital consent form for a tattoo or piercing, we capture their signature name, date of birth, home address, emergency contact, the design and placement, medical answers, the ID photo where one is required, IP address, user agent, and timestamp. A SHA-256 hash and canonical JSON snapshot of the signed state is stored alongside the consent record as immutable legal evidence. It is kept for as long as the artist's account exists. Many states require tattooers to keep signed consent forms for years, so when an artist closes their account, coil first emails them every signed form as a spreadsheet, and deletes them 30 days later.

• Account data: kept while your account is open. When you close it, your site goes offline straight away, and everything coil holds for it (sign-in, site, photos and files, clients, messages, bookings and records) is permanently deleted 30 days later. Only the owner can close an account, and only once other artists working on it have been moved to accounts of their own, so their sites and clients are never deleted with yours.
• SMS threads: kept while the account is open and deleted with it. Opt-out records (the list of phone numbers that have opted out of texts) are kept for as long as the account exists, so we honor your clients' revocations for as long as anything can be sent from it. They are deleted with the account, when its coil number is released.
• Consent records: kept while the account is open. When you close it, we email you every signed form first, then delete them with the account 30 days later. ID photos stay out of that email; reply and we'll send one.
• Payment records: Stripe keeps its own records of payments and payouts under its rules and US tax law (typically seven years). coil's copies (deposits, tips, income) are deleted with the account.
• Logs and analytics: Sentry error reports are deleted within 90 days. PostHog and Vercel Analytics keep data under their own retention rules; email us and we'll delete your PostHog data. Twilio and Resend keep delivery logs of the texts and emails we sent under their own rules.

These vendors process data on our behalf. Each one has its own privacy policy you can read.

• Vercel: hosting, edge runtime, and Vercel Analytics (page-view counts)
• Supabase: database, auth, file storage
• Stripe: payments, Connect onboarding, card readers
• Anthropic (Claude): AI generation, booking request and Instagram message triage, healing photo checks
• Resend: transactional email delivery
• Twilio: text messages, coil phone numbers, phone verification
• Sentry: error monitoring
• PostHog: product analytics
• Meta (Instagram): sign in with Instagram, portfolio sync, and Instagram messages when you switch them on
• Meta: ad measurement on marketing pages (Meta Pixel)
• Google: Google Calendar, when an artist connects it
• Cloudflare: bot checks on booking forms (Turnstile), when switched on
• Expo: push notification delivery and app updates for the coil phone app
• Apple Push Notification service: delivers those notifications to iPhones
• Google Firebase Cloud Messaging: delivers those notifications to Android phones
• OpenStreetMap Nominatim: turns a shop's address into map coordinates
• Jitsi Meet (8x8): video rooms for discovery calls, when you haven't set your own call link

• All multi-tenant data is protected by row-level security policies enforced at the database, not the application.
• HTTPS everywhere, HSTS preload, SameSite cookies.
• Stripe Elements and Checkout handle card details, so we are in PCI SAQ-A scope.
• Client funds for deposits flow Stripe-Connect direct to the artist's bank. coil never holds money for artists.

You can update, export, or delete your data at any time from the dashboard, or by emailing us. Closing your account permanently deletes what coil holds for it 30 days later; see Data retention for what other services keep.

California residents (CCPA) and EU/UK residents (GDPR) have additional rights: request, correction, deletion, portability, objection. Email us and we'll handle it.

We don't sell personal information. The Meta Pixel on coil's own marketing pages can count as “sharing” for advertising under California law, so you can opt out on Your privacy choices, and we treat a Global Privacy Control signal from your browser as that opt-out. Your clients' information is never sold or shared for advertising.

We use first-party cookies for sign-in and a small number of third-party analytics cookies (PostHog). Our own marketing and signup pages also set a Meta Pixel cookie so we can measure our Instagram ads. Artist sites and every client-facing page (inquiry, consent, tips, aftercare) carry no advertising cookies and no cross-site retargeting: your clients are never an ad audience.

coil is not for anyone under 18, and sign-up asks you to confirm you are. Clients must be 18 or older to sign a consent form or fill in check-in answers on coil; minors sign on paper with a parent or guardian there, under your local rules.

Think something on coil uses your work without permission? See our copyright policy for how to report it.

We'll update this page when the substance changes and bump the date at the top. For account-affecting changes, we'll email you.

hello@coil.tattoo

COIL TATTOO, INC.
2810 N Church St, Ste 90105
Wilmington, DE 19802